This came up as it seems there are programs (not mine) about that
really expect both r0 files to be present. I had no idea that there's
two different hashs for the different ssl versions, though given that
the file was present on the SL6 and not the SL5 machine should have
probably rung a bell.
Cheers,
Daniela
On 3 October 2012 15:39, Jens Jensen <[log in to unmask]> wrote:
> Maybe I misunderstood the question.
>
>
> jensen@ganesha[2]24% cd /etc/grid-security/certificates
> jensen@ganesha[2]25% ~/projects/openssl-1.0.0d/apps/openssl x509
> -subject_hash -subject_hash_old -noout -in MYIFAM.pem
> WARNING: can't open config file: /usr/local/ssl/openssl.cnf
> 58b08cb5
> d33760ec
>
> You will be needing the <hash>.r0 file, either as a real file, or as a
> symlink to MYIFAM.r0 or somesuch. The choice of hash depends on your
> version of OpenSSL. fetch-crl should create these, I'd have thunk.
>
> Cheers
> -j
>
> On 03/10/2012 13:07, Daniela Bauer wrote:
>> As stated, it is running and there are no errors. Running it by hand
>> makes no difference.
>>
>> Cheers,
>> Daniela
>>
>>
>>
>> On 3 October 2012 12:31, Jens Jensen <[log in to unmask]> wrote:
>>> Guessing: fetch-crl is not running on the hosts without CRLs? Or it has
>>> a problem of some sort? Could you run fetch-crl by hand?
>>>
>>> -j
>>>
>>> On 03/10/2012 11:28, Daniela Bauer wrote:
>>>> Hi,
>>>>
>>>> I came across this yesterday, but I haven't been able to come up with
>>>> an explanation:
>>>>
>>>> Why do some certificates (for lack of a better word) come without
>>>> revocation lists ? (No obvious errors in fetch-crl.)
>>>>
>>>> And how can it be that for some certificates I (and not just me...)
>>>> have no revocation lists on almost all of my machines, *except* my
>>>> EMI2 CE ?
>>>>
>>>> e.g. EMI1
>>>>
>>>> [root@ceprod05 certificates]# ls -l 58b08*
>>>> lrwxrwxrwx 1 root root 10 Sep 26 05:22 58b08cb5.0 -> MYIFAM.pem
>>>> lrwxrwxrwx 1 root root 17 Sep 26 05:22 58b08cb5.namespaces -> MYIFAM.namespaces
>>>> lrwxrwxrwx 1 root root 21 Sep 26 05:22 58b08cb5.signing_policy ->
>>>> MYIFAM.signing_policy
>>>>
>>>> EMI2:
>>>> [root@ceprod08 certificates]# ls -l 58b08*
>>>> lrwxrwxrwx. 1 root root 10 Sep 25 12:08 58b08cb5.0 -> MYIFAM.pem
>>>> lrwxrwxrwx. 1 root root 17 Sep 25 12:08 58b08cb5.namespaces ->
>>>> MYIFAM.namespaces
>>>> -rw-r--r--. 1 root root 1258 Oct 3 06:45 58b08cb5.r0
>>>> lrwxrwxrwx. 1 root root 21 Sep 25 12:08 58b08cb5.signing_policy ->
>>>> MYIFAM.signing_policy
>>>>
>>>>
>>>> Note that both directories contain plenty of fresh revocation lists
>>>> and are both up to version 1.50-1
>>>>
>>>>
>>>> Cheers,
>>>> Daniela
>>>>
>>>
>>> --
>>> Scanned by iCritical.
>>
>>
>>
>
> --
> Scanned by iCritical.
--
Sent from the pit of despair
-----------------------------------------------------------
[log in to unmask]
HEP Group/Physics Dep
Imperial College
Tel: +44-(0)20-75947810
http://www.hep.ph.ic.ac.uk/~dbauer/
|